EUVD-2025-206301

WeasyPrint has a Server-Side Request Forgery SSRF Protection Bypass via HTTP Redirect...

CVE-2025-68616

WeasyPrint helps web developers to create PDF documents. Prior to version 68.0, a server-side request forgery SSRF protection bypass exists in WeasyPrint's defaulturlfetcher. The vulnerability allows attackers to access internal network resources such as localhost services or cloud metadata...

Server-side Request Forgery (SSRF)

Overview weasyprint is a The Awesome Document Factory Affected versions of this package are vulnerable to Server-side Request Forgery SSRF via the defaulturlfetcher function. An attacker can access internal network resources by exploiting automatic HTTP redirects that are not re-validated against...

CVE-2025-68616

WeasyPrint CVE-2025-68616 describes a Server-Side Request Forgery (SSRF) protection bypass in the default_url_fetcher, allowing redirects via urllib to reach internal resources (e.g., localhost or cloud metadata) even when a developer blocks access with a custom url_fetcher. The issue affects Wea...

Mozilla Thunderbird < 68.0

The version of Thunderbird installed on the remote Windows host is prior to 68.0. It is, therefore, affected by multiple vulnerabilities as referenced in the mfsa2019-28 advisory. - Until explicitly accessed by script, window.globalThis is not enumerable and, as a result, is not visible to code...

Security fix for the ALT Linux 10 package thunderbird version 68.0-alt1

Aug. 29, 2019 Andrey Cherepanov 68.0-alt1 - New version 68.0. - Fixed: + CVE-2019-9811 Sandbox escape via installation of malicious language pack + CVE-2019-11711 Script injection within domain through inner window reuse + CVE-2019-11712 Cross-origin POST requests can be made with NPAPI plugins b...

Fedora 30 : firefox (2019-a1b709fca0)

New upstream version 68.0 - Release notes at https://www.mozilla.org/en-US/firefox/68.0/releasenotes/ Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much...

Mozilla Firefox < 68.0

The version of Firefox installed on the remote Windows host is prior to 68.0. It is, therefore, affected by multiple vulnerabilities as referenced in the mfsa2019-21 advisory. - Until explicitly accessed by script, window.globalThis is not enumerable and, as a result, is not visible to code such ...